questions,prompt1,prompt2
"    Data Collection and Consent: Is personal data collected for specific, legitimate purposes, and is the data necessary for these purposes (data minimization)?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Data Collection and Consent: Are individuals clearly informed about the purpose of data collection at the time of collection (e.g., privacy notices)?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Data Collection and Consent: Is explicit consent obtained where required, particularly for sensitive data or marketing purposes?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Data Collection and Consent: Can individuals easily withdraw consent at any time?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Consumer and Data Subject Rights: Does the plan allow individuals to exercise their right of access (requesting information about their data)?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Consumer and Data Subject Rights: Does the plan allow individuals to exercise their right to rectification (correcting inaccurate data)?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Consumer and Data Subject Rights: Does the plan allow individuals to exercise their right to erasure (deletion of data)?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Consumer and Data Subject Rights: Does the plan allow individuals to exercise their right to data portability (transferring data to another service)?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Consumer and Data Subject Rights: Does the plan allow individuals to exercise their right to opt-out of the sale of personal data (for CCPA)?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Consumer and Data Subject Rights: Are individuals provided with clear mechanisms for exercising these rights and are requests responded to within the required timeframe (e.g., 30 days for CCPA, 1 month for GDPR)?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Data Protection and Security: Does the plan include appropriate technical and organizational measures to protect personal data (e.g., encryption, access control, secure storage)?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Data Protection and Security: Are there processes in place for regular security risk assessments and ensuring appropriate safeguards are in place to prevent unauthorized access or breaches?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Data Protection and Security: Does the plan include provisions for data breach notification, ensuring that breaches are reported to relevant authorities and individuals within the required timeframes (e.g., within 72 hours for GDPR, 30 days for CCPA)?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Data Sharing and Third-Party Agreements: Is personal data shared with third parties clearly disclosed, and does the plan describe how data is shared and with whom?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Data Sharing and Third-Party Agreements: Are there contracts with third-party processors (e.g., service providers) ensuring compliance with data protection regulations (GDPR, CCPA)?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Data Sharing and Third-Party Agreements: For data transfers outside the European Economic Area (EEA), does the plan include safeguards (e.g., Standard Contractual Clauses for GDPR)?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Data Sharing and Third-Party Agreements: Does the plan ensure that third parties comply with privacy laws and respect individuals' data rights?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Data Retention and Deletion: Does the plan specify how long personal data will be retained and ensure it is not kept longer than necessary for its intended purpose?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Data Retention and Deletion: Are there provisions for secure deletion of personal data when it is no longer required, ensuring that data is fully erased from systems?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Incident Response and Monitoring: Does the plan include clear incident response procedures for handling data breaches or security incidents?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Incident Response and Monitoring: Are there systems in place to monitor for unauthorized access or data breaches, and is there a response plan in case of such incidents?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Privacy Policy and Transparency: Does the plan include a privacy notice or data processing policy that clearly explains what data is collected, why it is collected, how it will be used, and how it will be protected?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Privacy Policy and Transparency: Are consumers informed about their privacy rights and how to exercise them (especially for CCPA and GDPR)?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Access Control: Does the plan define and enforce access control policies ensuring that only authorized individuals can access sensitive or personal data (e.g., role-based access)?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Access Control: Are access rights regularly reviewed and adjusted based on the principle of least privilege?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Risk Management and Auditing: Does the plan describe a risk management process to identify, assess, and treat risks related to the processing of personal data or information security?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Risk Management and Auditing: Are there regular audits of the plan's compliance with data protection regulations and information security practices (including data protection impact assessments where required)?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Risk Management and Auditing: Is there a management review process to evaluate and improve the effectiveness of the security measures and compliance practices?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Training and Awareness: Does the plan include training programs for employees to ensure they understand data protection obligations and security best practices?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Training and Awareness: Are employees regularly trained on new regulations and internal policies regarding data protection and information security?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Legal and Regulatory Compliance: Does the plan ensure compliance with relevant laws and regulations related to data protection (e.g., GDPR, CCPA, ISO 27001)?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
    Legal and Regulatory Compliance: Is the plan updated regularly to reflect any changes in legislation or new regulatory requirements?,Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Non-Discrimination (CCPA-specific): Does the plan ensure that consumers are not discriminated against for exercising their privacy rights (e.g., opting out of data sale or requesting deletion)?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"
"    Children’s Privacy (CCPA and GDPR-specific): Does the plan address the collection of personal information of minors (under 16 for CCPA, under 13 for GDPR), including obtaining verifiable parental consent where required?",Read the following document and answer the following question clearly and concisely in 100 words or less. SAMPLE DOCUMENT: {sample_plan} QUESTION: {subquestion} RELEVANT CONTEXT: {subquestion_context} ANSWER: ,"According to government policy, an acceptable document must have all of the elements described in the following questions. Read the following question-and-answer pairs about a certain proposal and determine whether or not it conforms to the government pollicy. Remember: if any single element is missing from the proposal, it automatically means that the entire proposal does NOT conform to government policy. If the plan does not conform to government policy, explain why not. {qa_pairs} Based on the question-and-answer pairs above, does the plan follow government policy?"